HackingStolen CredentialsCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICLowContained
VENTURA COUNTY CREDIT UNION
bd_f0d2f8cfe155efef · schema v1 · pii pii-v1
Full breach record for VENTURA COUNTY CREDIT UNION →Ventura County Credit Union experienced unauthorized access to certain employee email accounts from October 20, 2022, to December 15, 2022. The organization became aware of suspicious activity on December 14, 2022. Investigation determined that names and other basic identity information were present in the affected accounts. No evidence of misuse was found. The credit union engaged third-party forensic specialists, implemented additional safeguards, and offered complimentary credit monitoring and identity protection services through Experian to affected individuals.
California clockDiscovered Dec 14, 2022 → Notified Jul 6, 2023204d ✗ CA 60-day late14 months discovery → filing
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_94d975cc0c03776aMaine State AGfiled 2024-01-24Candidate
- bd_d1ae26cf7d7cdffcNew Hampshire State AGfiled 2024-01-24Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-579832
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 24, 2024
- Raw hash
- 39a2b6a55465a8638c9868040da8b0b3ffdc4a9822262a4c6cfbdc7a54d33c67
Reporting entity
- Name
- VENTURA COUNTY CREDIT UNIONnorm: ventura county credit union
- Domain
- vccuonline.net
Victim entity
- Name
- VENTURA COUNTY CREDIT UNIONnorm: ventura county credit union
- Domain
- vccuonline.net
Incident
- Discovered
- Dec 14, 2022
- Materiality determined
- —
- Notification sent
- Jul 6, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
Compliance
- Time to disclose
- 14 months(406 days from discovery to filing)
- Compliance flags
- CA 60-day late · 204d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Dec 14, 2022→ Notified: Jul 6, 2023204d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.